CVE-2002-0076 Java Runtime Environment (JRE) Bytecode Verifier allows remote attackers to escape the Java sandbox and execute commands via an applet containing an illegal cast operation, as seen in (1) Microsoft VM...
HighCVSS 7.5
EPSS 26.9%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Java Runtime Environment (JRE) Bytecode Verifier allows remote attackers to escape the Java sandbox and execute commands via an applet containing an illegal cast operation, as seen in (1) Microsoft VM build 3802 and earlier as used in Internet Explorer 4.x and 5.x, (2) Netscape 6.2.1 and earlier, and possibly other implementations that use vulnerable versions of SDK or JDK, aka a variant of the "Virtual Machine Verifier" vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| HP Inc java jre-jdk | = 1.1.8 | No fix listed |
| HP Inc java jre-jdk | = 1.2.2 | No fix listed |
| HP Inc java jre-jdk | = 1.3 | No fix listed |
| Microsoft virtual machine | = 3802 | No fix listed |
| sun jdk | = 1.1.8-update14 | No fix listed |
| sun jdk | = 1.1.8-update8 | No fix listed |
| sun jre | = 1.1.8-update14 | No fix listed |
| sun jre | = 1.1.8-update8 | No fix listed |
| sun jre | = 1.2.2-update10 | No fix listed |
| sun jre | = 1.3.0-update5 | No fix listed |
| sun jre | = 1.3.1-update1 | No fix listed |
| sun jre | = 1.3.1-update1a | No fix listed |
| sun sdk | = 1.2.2_10 | No fix listed |
| sun sdk | = 1.2.2_010 | No fix listed |
| sun sdk | = 1.3.1_01 | No fix listed |
| sun sdk | = 1.3.1_01a | No fix listed |
| sun sdk | = 1.3_05 | No fix listed |
References
- 00218 vendor-advisory
- java-vm-verifier-variant(8480) vdb-entry
- 4313 vdb-entry
- MS02-013 vendor-advisory